Part 11 of 16
HTTP API reference
Every route the daemon serves: 303 paths, 347 registrations, grouped by plane. Scopes are the code’s, not the old reference’s.
- ConventionsThe contract every Crux Daemon route shares: base URL, the /v1 rule and its five exceptions, the full auth and scope model, the RFC-7807 error shape, the middleware order, ingress limits, feature flag
- Facts and memoryEvery route that reads or writes the memory substrate: facts, entities, edges, kinds, relations, engrams, cases, event append, local prose ingest, result-envelope import, the features lens and peer te
- Sessions and handoffsSession handshake, session state and archival, the observation journal, mediation receipts, the activity journal, the twelve Pro-gated Agent Workbench surfaces, agent and MCP tool usage, and the conte
- Query and retrievalText search, graph expansion, time-range queries, the projection read models, the SSE event stream, ops self-observation and bootstrap, the daemon-to-daemon embedding provider, and the hosted gpu1 sur
- Receipts and verificationReceipt bodies, signatures and verification reports, replay and subject exports, audit-bundle verification, the BYOK provenance gateway, observe-audit sessions, incidents and legal holds: with the cor
- Identity and passportsThe unified login rails, passports and their presence tracker, gated mint requests, cross-signed identity links and their candidate proposers, and principal resolution with the capability policy view:
- Work and coordinationThe work board and its approval gates, the live-session coordination plane, orchestrators, punchcard leases, projects and planes with their layer stores, repo links, storybooks and dossiers: 65 routes
- Extensions and StudioCommunity extensions and their per-passport grants, the trusted-key ring, the GitHub and OpenAI integration planes, the OpenAI function-calling shim, Studio pack build and verify with the signed templ
- Admin and operationsHealth and readiness probes, metrics, version and feature reporting, routing and shard maps, the admin action queue and valves, replication, repository registry and code maps, workspace scan, the cost
- Console and surfacesThe 40 console API routes behind the built-in SPA: onboarding, settings, facts and tenants, chunk previews, the review queue, integration install and grant, the CoreCrux and Engine mediation proxies,
- gRPCThe two gRPC services actually registered on port 4007, their ten RPCs and which of them check a scope, the transport hardening controls: and the third service that is compiled but never served, whose